Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa
File:                     996fdef2-0e18-371e-acd0-550347f88ec9.roa (raw, json)
Hash identifier:          p3GViBrYPwRXukZX/SR48FM+FUOavSvD2Sgy62+BtAo=
Subject key identifier:   12:33:B3:1A:DB:07:B9:D4:C1:14:06:B9:2C:58:B5:91:FE:F2:EA:7E
Certificate issuer:       /CN=89ee541c-de14-47cf-b4d0-081e933fb330
Certificate serial:       010D0C9F43285845C013874159662EC048182680
Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     53809
IP address blocks:        64.111.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:87:41:59:66:2e:c0:48:18:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=8aa6d912-5b8a-4e15-b4d8-62952c29434f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:e8:97:e1:92:48:38:7d:fb:8c:25:f1:a0:
                    9c:a4:a0:4f:9f:42:1b:1a:61:45:37:b1:ad:58:5e:
                    f2:d7:af:94:e5:8b:59:e6:aa:c0:8e:a6:ce:34:e6:
                    d3:20:33:ea:00:7f:83:ff:db:d9:c8:05:c9:81:c3:
                    19:98:cd:4e:5c:d1:4c:55:bd:4e:44:72:2c:ea:dc:
                    62:8c:bd:d8:b2:0d:76:44:fb:6d:e9:42:1d:a6:20:
                    d7:15:6e:ca:58:39:7a:08:4d:4c:c7:83:fc:6f:69:
                    a5:0e:84:f0:90:76:c5:cc:37:e6:04:73:11:4f:05:
                    e5:4f:69:9e:9a:dc:a1:ce:77:57:64:cd:7d:12:0f:
                    7e:96:26:12:4e:7b:28:b2:10:91:63:82:b7:81:41:
                    a3:90:4c:73:02:cc:28:b2:b3:da:47:3f:6e:45:65:
                    2e:28:28:75:3a:cf:7a:6c:72:b9:79:23:e3:92:47:
                    70:90:4d:b2:b0:5a:73:c1:cd:54:82:ae:62:d0:6c:
                    fd:cb:68:34:45:d5:5d:e6:92:e8:50:66:66:89:94:
                    45:ac:d3:4d:bc:4e:99:9a:3a:6f:33:54:93:74:06:
                    c6:b8:b7:07:b9:03:a9:71:2c:f3:98:ac:cf:1e:1d:
                    bf:d8:c6:9f:d3:5b:93:66:3f:4f:62:5f:40:cd:1b:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:B3:1A:DB:07:B9:D4:C1:14:06:B9:2C:58:B5:91:FE:F2:EA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:87:ad:ed:b4:c9:de:6c:30:c0:82:d7:e3:0a:9b:de:ce:
         0c:31:3a:22:7d:f6:0d:f2:f4:ab:a1:a3:28:c5:52:4b:9c:b6:
         7b:63:0a:ea:d9:46:a5:04:95:d6:22:76:1f:b6:e7:e3:8d:32:
         23:f7:45:19:34:c3:44:f1:16:f9:2a:29:cc:7d:6d:d6:28:e8:
         05:e3:57:78:04:ac:9a:60:ed:57:bd:e3:63:bd:ff:fa:42:bf:
         5d:24:d2:6d:0b:68:84:c8:e4:ff:2c:4a:9e:df:6e:f8:e4:48:
         3d:8d:88:68:76:5c:5f:80:60:53:87:0f:bf:f0:fb:80:8c:72:
         32:da:6b:6a:f4:00:19:71:4d:76:ac:42:44:72:07:2b:ef:72:
         52:04:ba:a6:db:79:d2:9f:cf:97:c9:ad:e8:e0:e5:55:7e:10:
         8e:9e:ae:d6:38:e5:de:b1:da:87:99:59:9e:96:29:8f:ff:87:
         9b:74:42:df:77:27:d5:40:df:d9:28:3f:71:97:c4:4a:d3:06:
         ce:f3:76:80:a5:7c:c3:9b:de:1d:46:17:41:13:23:b1:cd:aa:
         51:e8:03:88:69:6e:80:ca:9e:2b:c3:c2:f9:1d:de:da:25:0d:
         91:4b:e2:96:7b:f0:9a:66:5b:4d:ac:1a:7c:06:be:b6:11:c8:
         71:00:95:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE4dBWWYuwEgYJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZTU0MWMtZGUxNC00N2NmLWI0ZDAtMDgxZTkzM2Zi
MzMwMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
OGFhNmQ5MTItNWI4YS00ZTE1LWI0ZDgtNjI5NTJjMjk0MzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPol+GSSDh9+4wl8aCcpKBPn0IbGmFFN7Gt
WF7y16+U5YtZ5qrAjqbONObTIDPqAH+D/9vZyAXJgcMZmM1OXNFMVb1ORHIs6txi
jL3Ysg12RPtt6UIdpiDXFW7KWDl6CE1Mx4P8b2mlDoTwkHbFzDfmBHMRTwXlT2me
mtyhzndXZM19Eg9+liYSTnsoshCRY4K3gUGjkExzAswosrPaRz9uRWUuKCh1Os96
bHK5eSPjkkdwkE2ysFpzwc1Ugq5i0Gz9y2g0RdVd5pLoUGZmiZRFrNNNvE6Zmjpv
M1STdAbGuLcHuQOpcSzzmKzPHh2/2Maf01uTZj9PYl9AzRtaQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIzsxrbB7nUwRQGuSxYtZH+8up+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVl
NTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFlOTMzZmIzMzAvOTk2ZmRlZjItMGUxOC0z
NzFlLWFjZDAtNTUwMzQ3Zjg4ZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODllZTU0MWMtZGUxNC00N2NmLWI0
ZDAtMDgxZTkzM2ZiMzMwLzg5ZWU1NDFjLWRlMTQtNDdjZi1iNGQwLTA4MWU5MzNm
YjMzMC5jcmwwHwYDVR0jBBgwFoAU5c6XU3jki2pUQn5MS4/XJvVL58swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVlNTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFl
OTMzZmIzMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQG8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtHh63ttMnebDDAgtfjCpvezgwxOiJ99g3y9KuhoyjFUkuctntjCurZ
RqUEldYidh+25+ONMiP3RRk0w0TxFvkqKcx9bdYo6AXjV3gErJpg7Ve942O9//pC
v10k0m0LaITI5P8sSp7fbvjkSD2NiGh2XF+AYFOHD7/w+4CMcjLaa2r0ABlxTXas
QkRyByvvclIEuqbbedKfz5fJrejg5VV+EI6ertY45d6x2oeZWZ6WKY//h5t0Qt93
J9VA39koP3GXxErTBs7zdoClfMOb3h1GF0ETI7HNqlHoA4hpboDKnivDwvkd3tol
DZFL4pZ78JpmW02sGnwGvrYRyHEAlcg=
-----END CERTIFICATE-----
Generated at Sat May 4 15:04:58 2024 by rpki-client on console-fra.rpki-client.org